Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File:                     g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier:          YdfM4IYF6PibGDdXjUxEKJ1vpeJKR0YTuR4BtMd9W3I=
Subject key identifier:   31:F8:48:50:42:B3:29:82:E2:ED:AE:1E:32:5F:FE:19:B6:ED:9B:AE
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer:       /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial:       019358E5957465E58ACE75189B9F2D3DFA3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number:          031D
Signing time:             Sat 23 Nov 2024 12:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 12:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 12:01:01 +0000
Files and hashes:         1: VaqgJUCA9Pfra2E98-VuOgK5UYc.roa (hash: aSd/qxbjMlHI+SlJTbSbgk6TaKrN7lXkcjwMNHg/TN4=)
                          2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: 7zeIXeAXnLKb1mWcTLgpd0xbtyV7IC8MQ34Gt+rUnAw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:95:74:65:e5:8a:ce:75:18:9b:9f:2d:3d:fa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
        Validity
            Not Before: Nov 23 12:01:01 2024 GMT
            Not After : Nov 24 12:01:01 2024 GMT
        Subject: CN=31f8485042b32982e2edae1e325ffe19b6ed9bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:6e:b9:04:3b:1a:8e:09:bd:fe:82:82:97:
                    24:d7:ab:5a:26:ab:ee:68:8a:12:8b:f3:ea:51:ca:
                    c6:ec:4e:2f:3f:f4:5b:30:d5:d1:1b:8e:9e:e2:13:
                    2b:80:47:d6:1d:e9:a0:4f:3c:d1:62:cb:bb:01:84:
                    50:13:7a:bd:af:f8:31:93:92:d0:56:e9:96:ec:5e:
                    18:97:90:99:cd:54:59:f7:76:1d:63:07:91:a6:6e:
                    94:a9:99:53:59:4c:b8:e3:42:5e:3c:80:b9:5a:8f:
                    e8:3e:e4:23:6e:59:fb:c2:2c:51:41:b6:2b:a9:c3:
                    6e:bf:ee:b1:ec:9a:47:42:32:4c:30:19:d3:dd:1e:
                    c4:d8:9e:e9:dc:ca:59:e9:a5:1a:34:14:3a:8c:f4:
                    56:21:35:e3:f8:5b:c8:ce:b1:0f:d4:23:f8:19:23:
                    95:32:89:45:2d:4a:e9:6f:0d:19:cb:88:2f:c3:20:
                    4c:44:6d:0f:66:73:60:1a:73:70:33:e9:61:71:f3:
                    57:e1:ee:c2:9b:81:98:b7:0d:b7:f6:30:81:35:67:
                    29:70:56:44:bf:d9:d7:43:4d:9c:4f:36:d8:b5:27:
                    53:f1:4a:ff:50:41:e3:43:bc:61:28:bc:61:0e:37:
                    6a:86:94:27:58:f3:2a:b1:2f:1d:a7:f8:03:38:79:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F8:48:50:42:B3:29:82:E2:ED:AE:1E:32:5F:FE:19:B6:ED:9B:AE
            X509v3 Authority Key Identifier:
                keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:f6:2d:a9:ac:b9:f9:89:f9:5c:c8:98:a8:3d:a3:bf:0e:
         47:e6:9d:99:44:e3:60:7a:12:d1:4e:37:69:36:91:05:03:e8:
         52:8e:58:b8:47:5f:c6:80:88:21:44:a0:ad:ea:bd:f5:e8:fe:
         7c:72:b6:4c:c2:ec:97:f2:76:87:b0:7f:fb:38:49:e6:81:8a:
         2a:3a:0e:ec:54:ae:41:9b:e9:f3:27:6c:34:59:be:95:44:41:
         b1:0f:9b:2f:a8:ad:58:dc:d6:4e:e5:71:48:49:a7:11:76:8b:
         35:2e:90:88:c3:72:ba:17:3d:39:12:a0:9d:5d:49:fb:0d:ab:
         7b:57:35:9a:90:05:70:e4:c7:4b:51:cf:4e:df:e2:3f:ce:aa:
         e9:e8:0a:3d:cd:2f:de:90:c9:84:b6:68:16:f0:40:0f:54:57:
         7d:0d:ea:2c:c0:d3:4a:a1:5f:96:d6:bd:d4:6e:f2:ab:cd:ca:
         b2:c3:bc:fc:82:da:dd:a3:7a:ba:db:95:80:f1:04:3b:6b:ce:
         61:11:d7:ef:a0:f5:a3:ca:3b:9e:d8:8c:ca:06:1c:e1:e7:9c:
         db:cd:fa:64:ae:7d:e9:93:7d:6a:1e:e7:3c:6d:9c:95:c8:6a:
         cc:91:d2:60:ed:43:ce:24:c8:c8:ea:73:88:04:a3:05:14:33:
         8d:33:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:57 2024 by rpki-client on console-fra.rpki-client.org